Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

allow the dns check to be ignored with private hosted zones. #810

Closed
wants to merge 2 commits into from
Closed

allow the dns check to be ignored with private hosted zones. #810

wants to merge 2 commits into from

Conversation

billyshambrook
Copy link
Contributor

@billyshambrook billyshambrook commented Nov 4, 2016

fixes #781


This change is Reviewable

@googlebot
Copy link

Thanks for your pull request. It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

📝 Please visit https://cla.developers.google.com/ to sign.

Once you've signed, please reply here (e.g. I signed it!) and we'll verify. Thanks.


  • If you've already signed a CLA, it's possible we don't have your GitHub username or you're using a different email address. Check your existing CLA data and verify that your email is set on your git commits.
  • If you signed the CLA as a corporation, please let us know the company's name.

@billyshambrook
Copy link
Contributor Author

I signed it!

@googlebot
Copy link

CLAs look good, thanks!

@googlebot googlebot added cla: yes and removed cla: no labels Nov 4, 2016
@billyshambrook
Copy link
Contributor Author

I have submitted the cla/linuxfoundation CLA.

if err != nil {
return fmt.Errorf("error doing DNS lookup for NS records for %q: %v", dnsName, err)
}
if os.Getenv("DNS_IGNORE_NS_CHECK") == "" {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we want an env varible or to have a yaml option?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I will be using this env as I am using a private hosted zone. I am unsure if there were other cases when this env var would be used, @justinb?

Maybe we need to be more explicit being a private hosted zone. We could either identify whether the user has given a private or public using the aws API, or have it explicitly defined in the yaml.

Copy link
Contributor

@chrislovecnm chrislovecnm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Appreciate the work, but we do need a to have this in the yaml definition, not environment variables. We are trying to keep business logic out of env variables, and this is business logic.

@billyshambrook
Copy link
Contributor Author

OK no worries. So I should create a new yaml option called dnsIgnoreNSCheck which will be used in place of this envvar?

@billyshambrook
Copy link
Contributor Author

The DNS lookup is performed when creating a cluster, so will need to also add a CLI option along with the YAML option.

@chrislovecnm
Copy link
Contributor

Performed in the create or update? We can ask the user to do the three step process, create, edit, update.

On the fence. Your call but we already have a ton of cli switches.

@billyshambrook
Copy link
Contributor Author

Sorry, in the kops create command - will add the cli switch.

@jkemp101
Copy link

jkemp101 commented Nov 8, 2016

+1 for this change. I just had to comment out this section of code yesterday to workaround building with a private zone.

@billyshambrook
Copy link
Contributor Author

@chrislovecnm I have replaced the env var with a cli switch (and in the yaml)

@chrislovecnm
Copy link
Contributor

@justinsb / @kris-nova I need a model review. This looks good, but I want it awesome :)

@billyshambrook I am sorry I did not mention this, but what are your thoughts on testing this, or helping improve how we test this.

@chrislovecnm
Copy link
Contributor

@billyshambrook great talking with you about test cases. Like I said don't want 16 million lines of unit tests. Keep it simple, clean and elegant.

@chrislovecnm
Copy link
Contributor

We need a rebase, and I can merge.

if err != nil {
return fmt.Errorf("error doing DNS lookup for NS records for %q: %v", dnsName, err)
}
if !fi.BoolValue(cluster.Spec.IgnoreNSCheck) {
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is good, but it doesn't belong in the cluster spec. Yes, this does mean you'll have to pass the flag every time.

A nicer option is probably explicit support for a private DNS HostedZone. That didn't make sense before, but now we have topology=private, it does.

@chrislovecnm
Copy link
Contributor

We need a rebase and @justinsb has requested changes.

@chrislovecnm
Copy link
Contributor

I appreciate your work with this! Can we get a rebase, and @justinsb has some feedback.

@chrislovecnm
Copy link
Contributor

@billyshambrook any updates?

@justinsb justinsb modified the milestone: 1.5.0 Jan 8, 2017
@chrislovecnm
Copy link
Contributor

Did we fix this?

@krisnova
Copy link
Contributor

I think so! Adding the scheduled to close label.. Anyone have anything here?

@justinsb justinsb modified the milestones: 1.5.1, 1.5.2, backlog Feb 11, 2017
@krisnova
Copy link
Contributor

We haven't seen an update here in some time. Please re open this PR if we still want to follow it through.

@krisnova krisnova closed this Feb 12, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Error doing DNS lookup for NS records when using a Private DNS zone
6 participants